Update to release 2.18.4
Resolves: CVE-2020-11008

Crafted URL containing new lines can cause credential leak
Resolves: CVE-2020-5260

Update to release 2.18.2
Remote code execution in recursive clones with nested submodules
2019-1387
Arbitrary path overwriting via export-marks in-stream command
2019-1348
Recursive submodule cloning allows using git directory twice with synonymous
2019-1349
Fixes CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354

apply upstream run-command PATH fix (CVE-2018-19486)

config: document value 2 for protocol.version (upstream patch)
Fix builds without docs and without cvs and/or p4 (from skisela)
Fix smart-http test due to changes in cookie sort order in curl-7.61.1

Update to release 2.18.1, fixes CVE-2018-17456: arbitrary code execution via .gitmodules

Add %{?scl_prefix} macros for services + desktop files.
Add tests, checking hardcoded content of dist git sources,
Make git-gui.desktop, git@.service and gitweb-httpd.conf content
Move instaweb to separate subpackage
Switch instaweb default HTTP daemon to httpd
Use the correct apache module directory in instaweb.
Build docs with TZ=UTC to make results deterministic.

Fix %{perllibdir} path
%{perllibdir} now points to where perl-git modules are installed.

Initial rhscl-3.2-rh-git218 commit

Disable link checking on RHEL again (partially reverts 2.17.0-3)

Fix build --without cvs

Update to 2.18.0

Rebuilt for Python 3.7

Update to 2.18.0-rc2
Apply upstream zlib buffer handling patch (#1582555)

Include git-contacts, SubmittingPatches suggests it to users
Build git-subtree docs in %build

Update to 2.18.0-rc1
Drop flaky & out-of-place netrc credential helper tests